avast terrible in virii detect?!?!?!?

[Pavel Baudis]

well, i never excecute them !  

There mostly zipped, and this way being harmless untill unpacked (wich i never do).

Well, the only problem with such "collections" is that they usually contain big number of crap - corrupted files, jokes, even false alarms and other similar stuff. And while nobody really executes them (like you ) - they are counted as viruses by many people...

Pavel

[Lisandro]

Well, the only problem with such "collections" is that they usually contain big number of crap - corrupted files, jokes, even false alarms and other similar stuff. And while nobody really executes them (like you ) - they are counted as viruses by many people...
Pavel

Thanks for advicing, Pavel  

[Lisandro]

to tec & wald yes sure i will send the link but be carefull!!!!!ok ?

I didn´t receive your link  :'(

[raman]

Using google will do the job, too! But remember always what Pavel said these "collection" of Internet-viruses are really contain much rubbish and are often really old. They  not really good for reliable tests.
F-prot is really good in identify such garbage. Often it reports (by using /collect) such files as corrupted ,garbage or "not a virus"!:)

[mantra]

"Well, the only problem with such "collections" is that they usually contain big number of crap - corrupted files, jokes, even false alarms and other similar stuff. And while"

i can post some of these files

maybe somebody can turn off the av and try to run it  

[raman]

The Problem with the old Dosvirus are, that  they can not infect PE files or exe files at all and they are not able to get controll to int13h or int21h, because Windows wouldn´t let them.

BTW DosVirusesdid you see that AVAST did not catch this one?
29a-1.zip/FILES/ZHEN7313.EXE   Infected   Zhengxi.7313.a

Search more Variants of these Virus and test it too!  BTW2: This Virus is so bugy that it is very difficult to  let it infect files, even under DOS!:)

[pk]

BTW DosVirusesdid you see that AVAST did not catch this one?
29a-1.zip/FILES/ZHEN7313.EXE   Infected   Zhengxi.7313.a

I'm not responsible for adding new signatures to avast!, but isn't zhengxi one of the most comples viruses written in DOS ? short description (http://29a.host.sk/29a-1/29a-1.4_2 - or somewhere in vbulletin page). And in Win ? Read this interesting article (http://www.peterszor.com/metamorp.pdf).

[raman]

but isn't zhengxi one of the most comples viruses written in DOS ?

Yes, Mcafee/Drsolomon made it easy, they made only a signature for all Zhengxi Viruses they coul find  on the internet or which were send to them!:) You can see it, because they name it zhengxi.number.dr(opper)

[mantra]

raman
do u use Mcafee?"?"

i have never tried!
is it great?
and the update module is like avast?

[raman]

Yes, i like Mcafee! But i only use the Commandlineversion of it. Or you can use the Gui, if you choose costume installation and only install Scanner, updater and the Monitor.

[mantra]

but the updarte module is like avast so fast and incremental?

[raman]

If you use the updater, yes it is.  You can see how big the Updates are if you look at the *.upd files here: ftp://ftpeur.nai.com/pub/antivirus/datfiles/4.x/
One "problem" is, if there is a new scanningengine you have to download the Superdat-file. It will not be updated automaticaly, but that happens afaik only two times a year.

[Lisandro]

If you use the updater, yes it is.  You can see how big the Updates are if you look at the *.upd files here: ftp://ftpeur.nai.com/pub/antivirus/datfiles/4.x/
One "problem" is, if there is a new scanningengine you have to download the Superdat-file. It will not be updated automaticaly, but that happens afaik only two times a year.

Thanks raman...
But mantra always complain that av use too much RAM... McAfee eats more RAM than avast! at similar configuration...  

[raman]

But mantra always complain that av use too much RAM

Thats one reason  i only use the commandlineversion of Mcafee!:)

[Lisandro]

Could you send me an IM or email with these links?
Thanks, mantra  

Mantra, because of other foruns oppinions (raman and kubejc), forget sending this links to me...
Anyway, very thanks...